Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
File:                     1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json)
Hash identifier:          Fgev7WjJqIqX8yzqEk26gXSbuwCJ9z/Qfw6xo2FzD98=
Subject key identifier:   80:1F:FF:CC:47:3D:75:54:5F:39:36:9E:18:DF:98:1B:FE:C9:99:55
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Certificate issuer:       /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial:       019D26CDADB1393ADACD8169E925982EB9BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
Manifest number:          1893
Signing time:             Wed 25 Mar 2026 21:01:46 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:46 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:46 +0000
Files and hashes:         1: 0cWx-DBEWXofQGq4uONjR9-bH4Y.roa (hash: pTkOoFQAT359monWmVl8M1BT8bJvgYKuEr63L6+DXH0=)
                          2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: csb42kw1lPBSZvRO8KberUinoyyCAL57ChkKHvtIsAY=)
                          3: AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa (hash: Zi71VPuABO0kIOBrih/loFOATBl1klL+p6nG7AFF/d0=)
                          4: Bcd1BhwhrloaAtNtyP-2iXTXB5A.roa (hash: dwpLC5kz/iKWj1XEBoyZJZ2yN/0XmLy1ykd/NJpK0sU=)
                          5: EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa (hash: pJY6CLyIZmy66AbMBmwM31A1sACoy25h4xx0+iPYYKE=)
                          6: MP5IdtDl7YEwuRNByyv8kDyAVco.roa (hash: vqDoHpH/1+pER1chx+gV6UvPLCxswhMzI5LmhtQHsu4=)
                          7: TJn7hrwQDusGI6b-JvzCy0ryuuI.roa (hash: jB76SwGUuXPBEx6T4Yw/Gggaft9shy0ZMidb4G0i9nM=)
                          8: UNIm3YXiMDOMkRxhMMlo6vVHArk.roa (hash: Tj2pYqF/A8kH66w2NIt64SQxibERr8EqlG3Fz5Bjgag=)
                          9: UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa (hash: NgIQIWjEkGD0w0vEE9BTQb05Jn1iZvBqKIdoPQLt1R0=)
                          10: XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa (hash: k03+qzTCxQ7lrjUzBfLF9RxlBcgnBj56L5MGzoB6xFA=)
                          11: _6SUA7PKYEVFBTaDAhE_A7MmF48.roa (hash: uJO3tMs1LSBIuJd7osQRiXv584cj5QanzKyRrYPze+w=)
                          12: cOTwaK6RSeeGqDttEyYUstwdoCE.roa (hash: alEZzagowBG75tk1HZniA5+5QPNp5iyxbE6HUR50PHQ=)
                          13: fJWzhiz6ayYsqM8kzsREYtIJBgI.roa (hash: N8Chz/wqQxJEwp3lnnRBhU8gdawDyJefdia645ECTwg=)
                          14: gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa (hash: VFwJmY7TYTF5JsUpp282lqGtLaHhhYMOSpBJGNGXiME=)
                          15: q7ctECBBEGOXl7uVauozGHraScs.roa (hash: gH9pmibDk4Ofnm2E38XD3fGrNK+1ocC6xSl5pld1ojw=)
                          16: qyuH8NgRhRZdTsIxcPjney8uG5Y.roa (hash: n0uUMyMPIGkKTSZ3n9g1M0rkf82uD6ttedakSVtd8tQ=)
                          17: vhCKx6YE6UZfYQ_y2if0T0sJx9A.roa (hash: 4GxEPZps/hQabeBQl+bTu8j92zD3sd9eABLT3Mr/M3g=)
                          18: x0r6XLUbiGOM5wv_gPZskGbu2oc.roa (hash: cdp8ZKRLyyEX1Hh8O5VsarJhdWV3a3wqBRxkXALsMf0=)
                          19: z1vIHaPgOEf1CFFXxVhQ7UIS68w.roa (hash: rFdz4/+higPiFTrvJsOTs2dDOqXP1ja44+BB/HAKISI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:ad:b1:39:3a:da:cd:81:69:e9:25:98:2e:b9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
        Validity
            Not Before: Mar 25 21:01:46 2026 GMT
            Not After : Mar 26 21:01:46 2026 GMT
        Subject: CN=801fffcc473d75545f39369e18df981bfec99955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:37:18:ad:d2:f3:15:e1:21:9e:67:65:30:39:
                    31:7c:be:74:dc:c1:06:20:51:63:60:5a:64:d0:11:
                    b4:c0:6d:e4:f8:9d:ce:84:cc:50:5f:d1:8b:e5:42:
                    60:1d:e4:cc:d9:e2:82:79:8f:f4:e2:c0:70:d0:f2:
                    bf:54:14:f5:94:e1:6a:40:aa:fb:cf:de:d4:6c:e0:
                    81:18:2c:e5:04:ef:d2:e9:4f:91:f6:1b:b8:a5:46:
                    3b:d8:c7:41:f3:3a:cb:87:d5:2c:b1:5e:2f:7c:7a:
                    3c:d6:9b:31:fb:15:6f:fb:74:8c:9f:0c:78:79:17:
                    b3:ae:51:03:8f:03:0d:b8:71:cd:52:d3:91:b5:58:
                    2e:1e:88:25:0d:c1:5d:ce:fd:2e:e6:8d:61:63:cf:
                    a3:46:93:62:a7:ad:eb:08:84:d9:c1:64:ac:d1:50:
                    4c:82:7f:10:90:e3:47:56:ae:8e:73:b2:db:1a:f5:
                    32:50:26:88:cb:b9:cc:b0:3b:42:a3:a1:fb:28:e1:
                    65:33:da:e4:c9:bc:dd:0a:43:ba:ec:c8:94:bc:69:
                    d2:b5:f7:8b:7d:83:1c:06:68:b7:c3:87:fa:39:64:
                    5c:9b:b2:a5:bd:f7:7f:45:17:d9:ff:aa:a7:a9:f9:
                    ff:cc:5e:eb:54:5a:b2:13:ec:8d:ea:67:9b:16:30:
                    e4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1F:FF:CC:47:3D:75:54:5F:39:36:9E:18:DF:98:1B:FE:C9:99:55
            X509v3 Authority Key Identifier:
                keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2f:ce:85:e3:4d:92:d5:55:bc:87:1e:e2:73:60:b8:fc:ef:
         c1:da:ee:28:e3:cb:da:fe:8f:d2:dd:2d:0a:1f:e0:06:74:53:
         2d:29:df:c5:2f:1e:c2:d6:b4:4f:bb:8e:7a:89:16:3b:24:81:
         3c:0c:3d:9f:05:db:f4:7c:b8:5a:50:92:08:de:11:97:e7:6f:
         af:ef:5e:6e:88:6d:d6:a4:bf:b8:ef:06:a8:e1:9d:4d:9d:1b:
         9a:98:b4:54:22:3a:fc:6e:36:49:3f:e5:86:5a:f9:5a:ea:00:
         f8:e2:56:b4:74:10:af:fe:5f:f5:86:1a:74:7a:d9:05:ba:6f:
         8d:22:d7:87:5d:b4:f6:97:a1:87:57:9e:b7:fb:87:7d:99:3e:
         c6:bc:de:55:7a:26:0e:f7:81:22:e7:c8:dc:a3:cf:96:78:99:
         c9:40:fd:1f:8d:e8:04:4d:89:07:72:5e:42:4b:d7:b7:e0:34:
         9e:2d:2d:ed:bc:c3:99:39:09:46:c6:d8:27:10:73:2b:f4:76:
         fe:e1:79:84:15:78:d8:55:72:e8:53:fe:60:ed:16:fd:3a:fa:
         23:9e:6a:33:b7:a7:e4:3a:40:2e:08:df:f8:3a:b6:21:df:9a:
         28:cb:cf:e8:84:85:38:3d:31:2e:7d:42:e3:3b:e1:a3:59:64:
         74:14:5f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:43 2026 by rpki-client